OWASP Mobile Application Security (MAS)
The OWASP Mobile Application Security (MAS) flagship project provides a security standard for mobile apps (OWASP MASVS), a list of common security and privacy weaknesses specific to mobile apps (OWASP MASWE) and a comprehensive testing guide (OWASP MASTG) that covers the processes, techniques, and tools and test cases that enable testers to deliver consistent and complete results.
You can find all information about the project on our Official MAS Project Website.
About OWASP Mobile Application Security (MAS)
“Define the industry standard for mobile application security.”
The OWASP Mobile Application Security (MAS) flagship project provides a security and privacy standard for mobile apps (OWASP MASVS), a collection of mobile app-specific weaknesses (OWASP MASWE) and a comprehensive testing guide (OWASP MASTG) that covers the processes, techniques, and tools used during a mobile app security test, as well as an exhaustive set of test cases that enables testers to deliver consistent and complete results.
All the information about OWASP MAS can be found in the official website. There you can also read about the MASVS, MASWE and the MASTG.
Project Resources
Project Information
Flagship Project
Classification
Standards
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.